Litton and Giddings' janitorial service, PST Services, failed to shred patient billing records before sending them to a Springfield recycling company. The records may have been viewed by unauthorized parties before being destroyed at the recycling center.